This IP address has been reported a total of
85
times from
71 distinct
sources.
154.241.59.206 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-24T09:30:19.359239+02:00 server9 sshd[3058895]: Invalid user email from 154.241.59.206 port ...
show more2026-09-24T09:30:19.359239+02:00 server9 sshd[3058895]: Invalid user email from 154.241.59.206 port 41194
2026-09-24T09:35:01.637686+02:00 server9 sshd[3059373]: Invalid user es from 154.241.59.206 port 34538
2026-09-24T09:41:52.447054+02:00 server9 sshd[3060515]: Invalid user jeff from 154.241.59.206 port 50072
2026-09-24T09:44:05.096860+02:00 server9 sshd[3060700]: Invalid user jacob from 154.241.59.206 port 39982
2026-09-24T09:46:24.038458+02:00 server9 sshd[3060821]: Invalid user dataiku from 154.241.59.206 port 34028
...
show less
Sep 24 06:31:01 synth sshd[2036811]: Invalid user ftest from 154.241.59.206 port 44506
Sep 24 06:31: ...
show moreSep 24 06:31:01 synth sshd[2036811]: Invalid user ftest from 154.241.59.206 port 44506
Sep 24 06:31:01 synth sshd[2036811]: Disconnected from invalid user ftest 154.241.59.206 port 44506 [preauth]
Sep 24 06:34:58 synth sshd[2037515]: Invalid user report from 154.241.59.206 port 45256
Sep 24 06:34:58 synth sshd[2037515]: Disconnected from invalid user report 154.241.59.206 port 45256 [preauth]
Sep 24 06:37:25 synth sshd[2037920]: Invalid user jan from 154.241.59.206 port 58172
Sep 24 06:37:25 synth sshd[2037920]: Disconnected from invalid user jan 154.241.59.206 port 58172 [preauth]
Sep 24 06:39:47 synth sshd[2038314]: Invalid user super from 154.241.59.206 port 55922
Sep 24 06:39:48 synth sshd[2038314]: Disconnected from invalid user super 154.241.59.206 port 55922 [preauth]
Sep 24 06:41:58 synth sshd[2038689]: Disconnected from authenticating user root 154.241.59.206 port 51644 [preauth]
Sep 24 06:44:16 synth sshd[2039104]: Disconnected from authenticating user root 154.241.59.206 por
...
show less
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detec ...
show moreFail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
show less
(sshd) Failed SSH login from 154.241.59.206 (DZ/-/-): 5 in the last 3600 secs; Ports: *; Direction: ...
show more(sshd) Failed SSH login from 154.241.59.206 (DZ/-/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 24 01:39:56 na-s3 sshd[1593412]: Invalid user miao from 154.241.59.206 port 48032
Sep 24 01:44:37 na-s3 sshd[1640213]: Invalid user nmrsu from 154.241.59.206 port 34772
Sep 24 01:46:56 na-s3 sshd[1664241]: Invalid user reelforge from 154.241.59.206 port 47140
Sep 24 01:53:40 na-s3 sshd[1732037]: Invalid user vpn from 154.241.59.206 port 36186
Sep 24 02:02:50 na-s3 sshd[1825496]: Invalid user temp from 154.241.59.206 port 35616
show less
[24/Sep/2026:07:40:14 +0300] sshd: Invalid user newuser from 154.241.59.206 port 48342
[24/Sep/2026 ...
show more[24/Sep/2026:07:40:14 +0300] sshd: Invalid user newuser from 154.241.59.206 port 48342
[24/Sep/2026:07:40:14 +0300] sshd: Invalid user tw from 154.241.59.206 port 46616
[24/Sep/2026:07:40:14 +0300] sshd: Invalid user ubuntu from 154.241.59.206 port 59962
...
show less
Sep 24 03:53:49 antti-vps2 sshd[2227461]: Invalid user cobranza2 from 154.241.59.206 port 51146
Sep ...
show moreSep 24 03:53:49 antti-vps2 sshd[2227461]: Invalid user cobranza2 from 154.241.59.206 port 51146
Sep 24 03:56:08 antti-vps2 sshd[2227684]: Connection from 154.241.59.206 port 34928 on 10.0.0.124 port 22 rdomain ""
Sep 24 03:56:08 antti-vps2 sshd[2227684]: Invalid user navnath from 154.241.59.206 port 34928
Sep 24 03:58:28 antti-vps2 sshd[2227875]: Connection from 154.241.59.206 port 40822 on 10.0.0.124 port 22 rdomain ""
Sep 24 03:58:28 antti-vps2 sshd[2227875]: Invalid user daniels from 154.241.59.206 port 40822
...
show less
Sep 24 02:49:42 instance1 sshd[2734641]: Disconnected from authenticating user root 154.241.59.206 p ...
show moreSep 24 02:49:42 instance1 sshd[2734641]: Disconnected from authenticating user root 154.241.59.206 port 37786 [preauth]
...
show less
Aggressive port scan + SSH probing detected. Host enumerated multiple *22 ports then brute-forced ss ...
show moreAggressive port scan + SSH probing detected. Host enumerated multiple *22 ports then brute-forced sshd.
show less
Port Scan
Anonymous
SSH brute force attempt. User: gen, Pass: [REDACTED]
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: mq, Pass: [REDACTED]